| Date | Tue, 19 Mar 2013 18:03:50 -0700 | From | "H. Peter Anvin" <> | Subject | Re: [PATCH 01/12] Security: Add CAP_COMPROMISE_KERNEL |
| |
On 03/18/2013 09:47 PM, James Morris wrote: > On Mon, 18 Mar 2013, Matthew Garrett wrote: > >> This patch introduces CAP_COMPROMISE_KERNEL. > > I'd like to see this named CAP_MODIFY_KERNEL, which is more accurate and > less emotive. Otherwise I think core kernel developers will be scratching > their head over where to sprinkle this. > > Apart from that, I like the idea, especially when it's wired up to MAC > security.
The wiring up to MAC security is a nice touch.
-hpa
-- H. Peter Anvin, Intel Open Source Technology Center I work for Intel. I don't speak on their behalf.
|